Privacy Policy

Last updated: October 22, 2026

Introduction

Nic Pouch Deals (“we”, “us”, or “our”) operates the website https://nicpouchdeals.com/ (the “Website”), including its online store, products, content, features and related services (collectively, the “Services”).

Our Website is built using WordPress and WooCommerce, which enable us to provide our online shopping services, manage customer accounts and process orders.

We are committed to protecting your privacy and handling your personal information responsibly and transparently.

This Privacy Policy explains how we collect, use, store, protect and disclose your personal information when you visit our Website, create an account, make a purchase, communicate with us or otherwise use our Services.

We process personal information in accordance with applicable data protection legislation, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 (PECR).

Please read this Privacy Policy carefully to understand how we handle your personal information and the rights available to you.

Personal Information We Collect

We may collect and process the following categories of personal information, depending on how you interact with our Website and Services.

Contact Information

• Full name
• Email address
• Telephone number
• Billing address
• Shipping and delivery address

Account Information

When you create an account, we may collect:

• Username and email address
• Password information, stored in a protected form
• Account preferences and settings
• Order history and account activity

We do not store account passwords in plain text.

Order and Transaction Information

When you place an order through WooCommerce, we collect information including:

• Products purchased
• Order numbers and transaction references
• Order values and payment status
• Billing and delivery information
• Shipping and tracking details
• Refunds, cancellations and returns
• Previous purchases and order history

Payment Information

Payments made through our Website are processed using third-party payment service providers.

Depending on your chosen payment method, these providers may collect and process payment card information, billing information and transaction details to authorise and complete payments.

We may receive transaction references, payment status information and limited payment details necessary for accounting, refunds and customer support.

We do not ordinarily store full payment card numbers or card security codes within WordPress or WooCommerce.

Payment providers process your information in accordance with their own privacy policies and applicable security requirements.

Technical and Usage Information

When you visit our Website, we may automatically collect:

• IP address
• Browser type and version
• Device type and operating system
• Pages visited and browsing activity
• Referring websites
• Date and time of visits
• Shopping basket activity
• Cookies and similar technology identifiers

Marketing Information

Where applicable, we may collect:

• Email marketing preferences
• Newsletter subscription status
• Consent and opt-out records
• Interactions with marketing emails
• Product interests and preferences
• Website interactions used for permitted marketing activities

Customer Communications

If you contact us, we may collect the information you provide, including enquiries, complaints, customer service correspondence and feedback.

Age Verification Information

Our Website sells age-restricted nicotine products intended only for adults aged 18 and over.

Where necessary, we or our appointed verification providers may process information required to confirm a customer’s age or eligibility to purchase our products.

This may include identity information, date of birth, age-verification results or relevant verification references, depending on the checks carried out.

We aim to collect only the information reasonably necessary for these purposes.

How We Collect Personal Information

We collect personal information through the following sources.

Directly From You

This includes information you provide when:

• Creating a customer account
• Placing an order
• Completing checkout
• Subscribing to marketing communications
• Contacting customer support
• Submitting product reviews or enquiries

Automatically Through Our Website

We may collect information through WordPress, WooCommerce, server logs, cookies and other technologies used to operate, secure and improve our Website.

From Third-Party Service Providers

We may receive information from providers involved in payment processing, shipping, order fulfilment, website hosting, age verification, fraud prevention, analytics and other operational services.

From Our Previous Shopify Store

Nic Pouch Deals previously operated its online store using Shopify.

Following our migration to WordPress and WooCommerce, certain customer information may have been transferred from our previous platform to maintain continuity of our Services.

This may include customer contact details, account information, previous orders, purchase history and relevant customer preferences.

Information transferred during this migration will continue to be processed in accordance with applicable data protection legislation and this Privacy Policy.

From 4NX Pouches Limited

We may also receive personal information from 4NX Pouches Limited as part of the closure of the 4NX online store and the transition of its online retail services to Nic Pouch Deals.

This information may include customer names, email addresses, contact information, marketing preferences and relevant customer records.

Where we receive information through this arrangement, we will only use it for purposes permitted by applicable data protection legislation.

Receiving customer information from another business does not automatically provide permission to send marketing communications. We will only send promotional communications where we have an appropriate lawful basis and the requirements of applicable electronic marketing regulations are satisfied.

How We Use Your Personal Information

We use personal information for the following purposes.

Processing and Fulfilling Orders

• Process and confirm purchases
• Accept and verify payments
• Arrange packing, shipping and delivery
• Provide order confirmations and delivery updates
• Handle cancellations, refunds and returns
• Resolve issues relating to purchases

Managing Customer Accounts

We use your information to create and manage customer accounts, maintain order history, remember account preferences and provide access to account-related features.

Customer Support and Communications

We use personal information to respond to enquiries, resolve complaints, provide customer support and communicate important information about orders or accounts.

Marketing and Promotional Communications

Where permitted by law, we may use your personal information to communicate about products, promotions, offers and other relevant information relating to Nic Pouch Deals.

We use Klaviyo to support our email marketing activities, including managing subscriber preferences, sending promotional communications and measuring engagement.

We will only send marketing emails or text messages where:

• You have provided valid consent; or
• An applicable legal exception, such as the existing-customer soft opt-in, permits us to do so and all relevant requirements are satisfied.

You can unsubscribe from marketing emails at any time using the unsubscribe link included in our promotional messages.

Opting out of marketing will not prevent you from receiving essential transactional communications, such as order confirmations, delivery notifications or account-related updates.

Website Operation and Improvement

We may use website usage information to understand how visitors interact with our Website, diagnose technical problems, improve performance and enhance the shopping experience.

Security and Fraud Prevention

We may process personal information to protect customer accounts, identify suspicious transactions, prevent fraud, protect against unauthorised access and maintain the security of our Services.

Legal and Regulatory Compliance

We may process and retain information where necessary to comply with applicable laws and regulations, including accounting, taxation, consumer protection, age-restricted sales requirements and lawful requests from relevant authorities.

Our Lawful Bases for Processing Personal Information

Under UK GDPR, we must have a lawful basis for processing personal information.

Depending on the circumstances, we may rely on:

• Performance of a Contract: Where processing is necessary to fulfil an order, manage a customer account or provide services requested by you.
• Legal Obligation: Where processing is necessary to comply with applicable legal requirements, including tax records, accounting obligations and age-restricted product regulations.
• Legitimate Interests: Where processing is reasonably necessary for our legitimate business interests, such as operating and securing our Website, preventing fraud, improving customer support and managing our business, provided these interests are not overridden by your rights and freedoms.
• Consent: Where you have provided consent for particular activities, such as certain marketing communications or cookies and tracking technologies that require consent.

Where we rely on consent, you may withdraw it at any time.

Where permitted by PECR, we may rely on legitimate interests under UK GDPR for relevant existing-customer marketing that satisfies all requirements of the soft opt-in exception.

How We Share Your Personal Information

We may share personal information with trusted third-party service providers where necessary to operate our business and deliver our Services.

These may include:

• Website Hosting and Technical Providers: Providers that host, maintain, secure or support our WordPress and WooCommerce Website.
• Payment Service Providers: Third-party payment processors responsible for securely processing transactions and supporting refunds.
• Order Management and Fulfilment Providers: Services such as Veeqo, which may be used to manage orders, shipping, fulfilment and delivery operations.
• Delivery and Courier Services: Shipping providers that require recipient names, delivery addresses and contact information to deliver orders.
• Email Marketing Providers: Klaviyo, which processes relevant customer and subscriber information to support our email marketing activities.
• Analytics and Advertising Providers: Where enabled and permitted by law, services that help us understand website performance, measure advertising effectiveness or provide relevant advertising.
• Age Verification and Fraud Prevention Providers: Where used, providers involved in checking customer eligibility, identifying fraudulent transactions or protecting the security of our Services.
• Professional Advisers and Authorities: Accountants, legal advisers, regulatory authorities and other organisations where disclosure is reasonably necessary or legally required.

We may also disclose information in connection with a business restructuring, merger, acquisition or sale, subject to applicable data protection requirements.

We do not sell customer contact lists to third parties for their independent marketing purposes.

We require service providers acting on our behalf to handle personal information appropriately and in accordance with applicable data protection obligations.

WordPress and WooCommerce

Our Website uses WordPress as its content management system and WooCommerce as its e-commerce platform.

These systems allow us to manage customer accounts, product listings, orders, checkout information and related store functions.

When you make a purchase or register an account, relevant personal information is stored within our Website’s systems and associated hosting environment.

Access to customer information is restricted to authorised personnel and relevant service providers who require that access to perform their duties.

Additional WordPress plugins and WooCommerce extensions may process personal information where necessary to provide particular features or integrations.

We take reasonable steps to review the privacy and security implications of the services and integrations used on our Website.

Cookies and Similar Technologies

Our Website uses cookies and similar technologies to support essential website functionality, improve the user experience and, where applicable, analyse usage or support marketing activities.

Cookies are small files stored on your device when you visit a website.

Essential Cookies

WordPress and WooCommerce may use cookies necessary for functions such as:

• Remembering products added to your shopping basket
• Maintaining your shopping session
• Supporting checkout functionality
• Keeping customers logged into their accounts
• Providing security and preventing unauthorised access

WooCommerce cookies may include:

• woocommerce_cart_hash
• woocommerce_items_in_cart
• wp_woocommerce_session_

These cookies support shopping basket and session functionality and generally do not require consent where they are strictly necessary to provide the service you have requested.

Analytics Cookies

Where enabled, analytics technologies may help us understand visitor numbers, website usage, navigation patterns and performance.

We will obtain consent where required by law. Where an applicable exemption permits analytics without prior consent, we will comply with its conditions, including providing an appropriate means to object where required.

Marketing and Advertising Cookies

Where we use advertising or marketing tracking technologies, these may help us measure campaign performance, understand product interest or deliver relevant advertising.

We will request consent before using advertising cookies or similar tracking technologies where required by law.

Managing Cookies

You can control cookies through your browser settings and any cookie preference controls provided on our Website.

Where consent is required, you can refuse or withdraw it without affecting your ability to use essential shopping functions.

Disabling certain cookies may affect some features, including shopping basket and account functionality.

Data Security

We take the security of personal information seriously and use appropriate technical and organisational measures designed to protect information against unauthorised access, loss, misuse, alteration and disclosure.

These measures may include access controls, secure communications, protected account credentials, system maintenance and appropriate safeguards for customer records.

While we take reasonable precautions, no internet-based system can guarantee complete security.

You are responsible for keeping your account login details confidential and should contact us if you suspect unauthorised access to your account.

Data Retention

We retain personal information only for as long as reasonably necessary to fulfil the purposes described in this Privacy Policy, including satisfying legal, accounting, tax, regulatory and contractual requirements.

Retention periods depend on the nature of the information.

• Order and Transaction Records: Retained for the applicable accounting, taxation, regulatory and legal periods, which may commonly be six years or longer depending on the circumstances.
• Customer Account Information: Retained while an account remains active and for any additional period reasonably necessary for business or legal purposes.
• Marketing Information: Retained while there is a valid reason to process it, subject to applicable consent, preferences and legal requirements. We may retain limited suppression records to respect unsubscribe requests.
• Customer Support Records: Retained for as long as reasonably necessary to resolve enquiries, manage disputes or meet legal obligations.
• Technical and Security Records: Retained for periods appropriate to website security, troubleshooting and operational requirements.

Where information is no longer necessary, we take appropriate steps to delete, anonymise or otherwise securely dispose of it.

WooCommerce provides configurable personal data retention settings, which we use as appropriate alongside our wider retention requirements.

Your Data Protection Rights

Under UK GDPR and other applicable data protection laws, you may have the following rights.

• Right of Access: You can request confirmation of whether we hold personal information about you and request access to that information.
• Right to Rectification: You can request the correction of inaccurate or incomplete personal information.
• Right to Erasure: You may request deletion of your personal information, subject to applicable legal obligations and exceptions.
• Right to Restrict Processing: You may request that we restrict how your personal information is processed in certain circumstances.
• Right to Data Portability: Where applicable, you may request a copy of certain personal information in a structured, commonly used and machine-readable format, or request that it be transferred to another provider.
• Right to Object: You may object to certain processing activities, including processing based on legitimate interests. You have the right to object to the processing of your personal information for direct marketing at any time.
• Right to Withdraw Consent: Where we rely on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
• Rights Related to Automated Decision-Making: Where applicable, you may have rights relating to decisions made solely through automated processing that produce legal or similarly significant effects.

To exercise any of these rights, please contact us at care@nicpouchdeals.com.

We may request reasonable information to verify your identity before fulfilling a request.

We aim to respond to valid data protection requests within the timeframes required by applicable legislation, normally within one calendar month, subject to legally permitted extensions.

Certain information may need to be retained despite a deletion request where required by law or necessary for the establishment, exercise or defence of legal claims.

Marketing Preferences

You may unsubscribe from marketing communications at any time using the unsubscribe link contained in our promotional emails or by contacting care@nicpouchdeals.com.

We respect marketing preferences and withdrawal of consent.

Customer information transferred from previous platforms or received from third parties will only be used for promotional communications where an appropriate lawful basis exists and all relevant electronic marketing requirements have been satisfied.

Unsubscribing from marketing communications will not affect important order, delivery or account-related messages.

Children’s Privacy and Age-Restricted Products

Nic Pouch Deals sells nicotine products intended for adults aged 18 and over.

Our Website and Services are not intended for individuals under the age of 18, and we do not knowingly collect personal information from children for the purpose of selling our products.

Where appropriate, we may use age-verification measures to help prevent purchases by individuals who do not meet the minimum legal age requirements.

If we become aware that personal information has been collected from a child in circumstances where it should not have been collected, we will take appropriate steps to address the situation, including deletion where required.

Parents or guardians who believe that a child has provided personal information to us may contact care@nicpouchdeals.com.

Third-Party Websites and Links

Our Website may contain links to third-party websites, services or platforms that are not operated or controlled by Nic Pouch Deals.

We are not responsible for the privacy practices, security or content of those external websites.

We recommend reviewing the privacy policies of third-party services before providing them with personal information.

International Data Transfers

Some of our service providers may operate outside the United Kingdom.

As a result, personal information may be stored, accessed or processed in other countries.

Where international transfers involve personal information protected by UK data protection legislation, we take appropriate steps to ensure that the transfer is lawful and that suitable safeguards are in place.

These safeguards may include UK adequacy regulations, the UK International Data Transfer Agreement, an appropriate UK Addendum to international standard contractual clauses or other recognised lawful transfer mechanisms.

Where European Economic Area data protection rules apply, we will use appropriate safeguards under those rules.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our Website, technology, business practices, legal obligations or regulatory requirements.

Any updated version will be published on this page with a revised “Last updated” date.

Where legally required, we will provide additional notice of material changes.

We encourage customers to review this Privacy Policy periodically.

Complaints

If you have concerns about how we collect, use or protect your personal information, please contact us at care@nicpouchdeals.com.

We will investigate complaints and respond in accordance with applicable data protection requirements.

If you remain dissatisfied, you have the right to complain to the Information Commissioner’s Office (ICO), the UK’s independent data protection regulator.

Information Commissioner’s Office

Website: https://ico.org.uk/

Telephone: 0303 123 1113

If you are located in the European Economic Area, you may also have the right to complain to your relevant local data protection supervisory authority.

Contact Information

If you have any questions about this Privacy Policy, our handling of personal information or your data protection rights, you can contact us using the following details.

Nic Pouch Deals
Unit 2 Institute Buildings
Crumlin Square
Crumlin
Newport
NP11 4QD
United Kingdom

Email: care@nicpouchdeals.com

Website: https://nicpouchdeals.com/

For the purposes of applicable data protection legislation, the business operating Nic Pouch Deals is the data controller responsible for the personal information processed through our Services.